CVE-2020-24983

CVE-2020-24983 affects Quadbase EspressReports ES 7 Update 9. A CSRF flaw allows an unauthenticated attacker to craft a malicious HTML file containing a POST to the DashboardBuilder that uses the victim’s admin session to rename a Dashboard, i.e., the attacker can trigger authenticated changes vi...